News about cybersecurity: events, facts and developments on tafs uz.
51 stories
Japanese provider GMO Internet Group confirmed the removal of the domain where a hacker posted customer data after an unpaid ransom. The victim is under police protection, while Japan Airlines separately reported a possible data leak affecting 92,000 customers.
Aziz KarimovThe American cybersecurity agency CISA reported that hackers have begun using two critical PHP vulnerabilities (PHP2Shell) in real-world attacks, allowing remote takeover of servers without a password. The agency added the bugs to its catalog of known exploited vulnerabilities and required US civilian federal agencies to patch them within three days. The vulnerabilities were discovered two years ago but were considered impractical to exploit until researchers at Calif found a way to exploit them using AI.
Otabek YusupovNorway's National Security Authority (NSM) has published its first-ever assessment: over six months, the number of successful cyberattacks on Norwegian organisations tripled. At risk are the defence industry, the space sector and critical infrastructure. The agency also warned of threats related to artificial intelligence.
Aziz KarimovTurkey presented its Digital Sovereignty Strategy to the Cybersecurity Council chaired by President Erdogan. The document is aimed at reducing dependence on foreign technologies, protecting critical infrastructure, and developing national cyber capabilities amid growing threats related to artificial intelligence and algorithmic influence. Implementing the strategy will require inter-agency coordination and cooperation with the private sector.
Otabek YusupovAn attack on the computer system of Italy's Chamber of Deputies affected the email accounts of several lawmakers, including Prime Minister Giorgia Meloni. According to sources, the attack was contained, there is no emergency, but pressure on IT systems has intensified in recent days.
Aziz KarimovCathedral, a young American startup founded by DOGE alumni, penetrated Anthropic's systems in less than 12 hours as part of a vulnerability testing program, gaining access to correspondence, salary data and discussions of AI models. Anthropic confirmed the incident and said it had closed the vulnerable access paths.
Aziz KarimovStakhanovets product director Alexey Mironov told Gazeta.Ru that consenting to geolocation access means handing over data about your movements to advertising networks and analytics services, and listed the main risks — from fraud to burglary.
Otabek YusupovThe Australian Signals Directorate, in its annual cyber threat report, stated that artificial intelligence has enabled malicious actors to find vulnerabilities and exploit them on an 'unprecedented' scale. Over the past year, the agency issued more than 4,400 warnings about potentially malicious activity — 80% more than in the previous 12 months.
Aziz KarimovThe President of Uzbekistan appointed Oktam Khamdamov deputy minister of emergency situations for digitalization and cybersecurity. He previously headed a department at the Cybersecurity Center. It was also reported that Bakhtiyor Rakhmonkulov was appointed head of the ministry's small-craft inspection.
Otabek YusupovThe Ministry of Digital Development has developed recommendations for protecting data centers from drone attacks, dividing data centers into three significance categories — K1, K2 and K3. The document provides for reinforcing buildings, electronic protection, service redundancy, and cooperation with the Defense Ministry, the Emergency Ministry and Rosgvardia. Market participants warn that the measures could raise providers' service prices by about 10%.
Otabek YusupovAs part of the budget, the UK government announced the creation of a national AI Biosecurity Lab (AIBL) with £100 million in funding, supported by OpenAI and Anthropic, along with additional spending on cyber defence and the AI Security Institute. In its budget, the UK government announced the creation of a national AI biosecurity laboratory (AIBL) with £100 million in funding, supported by OpenAI and Anthropic, as well as additional spending on cyber defence and the AI Safety Institute.
Otabek YusupovOn Wednesday, a cyber incident disrupted the online systems of the Richmond Public Schools district in the U.S. state of Virginia. According to Superintendent Jason Kamras, the safety of students and staff was not affected. Schools continue to operate, having shifted to technology-free instruction; internet access remains down, but office phones and video surveillance cameras are functioning. The district is engaging external cybersecurity specialists and law enforcement to determine the scope of the incident.
Aziz KarimovTwo critical vulnerabilities that had existed for decades were discovered in the open programming language PHP. Website owners were instructed to install updates immediately or temporarily take their resources offline. Cloudflare recorded millions of attack attempts, and Amazon recorded exploitation attempts even before the public disclosure.
Otabek YusupovThe Russian Foreign Ministry called “completely unfounded” the accusations by Israeli Prime Minister Benjamin Netanyahu that Moscow is allegedly using AI for antisemitic bot networks against Israel. The ministry recalled a 2018 proposal on an information security agreement and linked the statements to the elections in Israel.
Otabek YusupovUsing a powerful OpenAI model, two critical vulnerabilities were discovered in PHP, the language that powers a significant share of the world's websites. Cybersecurity expert Michael Daniel believes this is the beginning of a chaotic period: AI finds vulnerabilities faster than organizations can close them.
Otabek YusupovAnthropic's deputy chief information security officer Jason Clinton warned that a wave of newly discovered software vulnerabilities could overwhelm defense systems in the coming months, putting power grids and water supplies at risk. He urged isolating sensitive networks and asking boards of directors for help with 'the basics' rather than AI, estimating the period of elevated risk at roughly 18 months.
Javlon TursunovAfter two critical vulnerabilities were discovered in PHP, the language powering millions of websites, IT teams worldwide rushed to install patches or take servers offline. Satya Nadella called the situation unprecedented, but experts note that rumors of hacker attacks — some of which were not confirmed — amplified the panic.
Sevara AzamovaOn October 23, UK authorities urged citizens to keep a three-day supply of water and food at home. The reason was a PHP software flaw that triggered mass cyberattacks, as well as a record-hot and dry summer with wildfires. A new wildfire response plan was announced, involving military aviation.
Javlon Tursunov
